CVE-2026-51856

The agentscope library (versions 1.0.18 , 1.0.19 , and 1.0.19 ) is vulnerable to arbitrary code execution. When a RealtimeAgent session exposes the execute_python_code tool, a remote WebSocket user can prompt the agent to execute Python code within the service environment. The root cause is locat...